Skip to main content
TeamCare Vendor API uses API key pairs and short-lived JWT Bearer Tokens for authentication. You generate keys from the TeamCare dashboard, exchange them for a token, and include that token in the Authorization header of every request.

Getting your API keys

Before you can call the API, you must generate credentials from the TeamCare web application:
  1. Log in to app.teamcaredental.com.
  2. Navigate to Settings > Company > Agreement and accept the Developer API Agreement. Only the account owner can perform this step.
  3. Go to Settings > Company > API Access and generate your API keys.
  4. Copy your client_id and client_secret. The secret is shown once and cannot be retrieved again.
Never share your API keys. The client_secret is displayed only once when generated. If you regenerate keys, the previous credentials are immediately invalidated.

Requesting a token

To obtain a Bearer Token, send your client_id and client_secret to the token endpoint.

Request parameters

string
required
Your API client identifier, generated in the dashboard.
string
required
Your API client secret, shown once during key generation.

Response fields

string
A JWT Bearer Token valid for 6 hours. Include this in the Authorization: Bearer <token> header on all subsequent requests.
Example response:

Using the token

Include the token in the Authorization header of every request to protected endpoints.
Cache your token and reuse it for the full 6 hour lifetime. Calling the token endpoint for every request will exhaust the 10 requests per minute per IP limit and cause avoidable 429 errors.

Token expiry

Tokens expire after 6 hours. When a token expires, requests will return a 401 Unauthorized error. Re-request a token using the same client_id and client_secret, then update the Authorization header in your application. There is no refresh token flow. Simply call the token endpoint again with your original credentials to receive a new Bearer Token.